Merge branch 'master' into feat/operation-logs

Resolve conflict in webdav-sync-expansion.spec.ts:
- Use simplified sync verification without reload (sync updates NgRx directly)
- Test: B marks task done -> sync -> verify A sees task as done

electron/jira.ts

@@ -23,11 +23,13 @@ export const sendJiraRequest = ({
   // log('--------------------------------------------------------------------');
   fetch(url, {
     ...requestInit,
-    // allow self signed certificates
+    // Allow self-signed certificates for self-hosted Jira instances.
+    // This is an intentional user-configurable setting (isAllowSelfSignedCertificate).
+    // CodeQL alert js/disabling-certificate-validation is expected here.
     ...(jiraCfg && jiraCfg.isAllowSelfSignedCertificate
       ? {
           agent: new Agent({
-            rejectUnauthorized: false,
+            rejectUnauthorized: false, // lgtm[js/disabling-certificate-validation]
           }),
         }
       : {}),